) U* F$ ?* B8 ^7 ~+ z8 l( }% {审计版本：XYCMS律师事务所建站系统 v1.6(其他版本自测): f3 F8 L* L$ j- K9 y
源码地址:http://down.chinaz.com/soft/29233.htm; O# C1 q; D4 Q0 s+ t
3 a6 `9 u' \+ t N% b( N
漏洞文件:shownews.asp/ I" b( t( \2 h% m7 G+ T
漏洞代码：7-13行: `4 x3 r' J3 i. P; Y
" u: h; T% J k a- D0 ? 6 E& B0 A9 G# l. Q: C+ Q% L' T
<% " J" [- p' i+ ^2 j2 s z4 W" aid=request.QueryString("id")# c ?* ~' l) T2 w, I. j+ h
, C" W* {" O7 \1 z1 U
set snews=server.createobject("adodb.recordset") ; p( l/ C. o& T8 X3 W
exec="select * from [news] where id="&id1 @- F4 w: G ^7 `! E
snews.open exec,conn,1,1- b# b, [ h: Y
%>$ d! ^2 C R/ I8 G) x/ p